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In the claims: 

For the Examiner's convenience, all pending claims are presented below with 
changes shown. 

1 . (Currently Amended) A method comprising: 

encrypting, based l e ast in port upon at least one key, one or more respective portions 
of inptttMilg data to generate one or more respective portions of eutptrt encrypted write data 
to be stored in one or more locations in storage; and al-tea st on e of: 

generating, based at least in par t upon the one or more respective portions of the 
eutputencrvpted write data, check data to be stored in the storage; and 

selecting the one or more locations so as to permit the one or more respective portions 
of the etttett tencrvpted write data to be distributed £ixnong two or more storage devices 
comprised in the storage. 

2 T (Currently Amended) The metbod of claim 1, wherein: 

the storage comprises a redundant array of independent disks (RAID); and 

the check data comprises one of parity data and a copy of the eratm rtencrvpted write 

data. 

3. (Currently Amended) The method of claim 1, further comprising: 
storing the at least one key in memory; and 

in response , at l e aot in part, to an attempt to tamper with the at least one key, erasing 
the at least one key from the memory. 
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4. (Currently Amended) The method of claim 1 , further comprising: 
determining, based at l e ast in part upon one or more credentials, whether to permit 

execution of one or more operations involving the storage. 

5. (Currently Amended) A method comprising: 
receiving a read request: 

retrieving one or more respective portions of the encrypted data from a plurality of 
storage devices comprised in the storage: and 

decrypting, based fe oot in p art upon at least one key, one or more respective portions 
of H*p«[t the encrypted read data retrieved from one or mor e r e sp e ctive loc a tions in storage to 
generate one or more respective portions of output read dat a; and at least one of : 

g e n e rating ch e ck data to b e stored in th e-s torag e , th e chook da t a being generated 
based at least in part upon tho on e or mor e r e spectiv e portionc of th e inputda taj-and 

retrieving th e one or more respective portions of the input data from a plurality of 
s torag e- d e vic e s compris e d in th e storage . 

6. (Currently Amended) The method of claim 5, further comprising: 

re c e iving a r e qu est t o re tri e v e request e d data, from th e stora ge , th e r e quested d ata 
comprising the output -da4aj-an4 prior to the decrypting of the one or more respective portions 
of the encrypted data, determining, based at l e ast in part upon one or more credentials, 
whether the request is authorized. 
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7. (Currently Amended) The method of claim 6, further comprising: 

generatin g, at l e ast in part, the at least one key based at l e aat in part upon at least one 
of one or more tokens and one or more passwords. 

8. (Currently Amended) The method of claim 5, wherein: 
the storage also stores metadata; and 

the method further comprises encrypting the metadata based at l e ast in part upon the 
at least one key. 

9. (Original) The method of claim 8, wherein: 
the metadata comprises partition information. 

10. (Currently Amended) An apparatus comprising: 

circuitry to encrypt, based least in part upon at least one key, one or more respective 
portions of mpirt\Yii£§ data to generate one or more respective portions ofeutptt tencrvpted 
write data to be stored in one or more locations in storage; 
the circuitry also being capable of at l e ast one of : 

generating, based at-teas t - in part upon the one or more respective portions of 
the output encrypted write data, check data to be stored in the storage; and 

selecting the one or more locations so as to permit the one or more respective 
portions of the e^p^ encrypted write data to- be distributed among two or more 
storage devices comprised in the storage. 
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1 1 . (Currently Amended) The apparatus of claim 1 0, wherein: 

the storage comprises a redundant aTray of independent disks (RAID); and 

the check data comprises one of parity data and a copy of the eaftH rtencrypted write 

data. 

12. (Currently Amended) The apparatus of claim 1 0, wherein: 

the circuitry is also capable of storing the at least one key in memory; and 
in response , at l e ast in part, to an attempt to tamper with the at least one key, erasing 
the at least one key from the memory. 

1 3 . (Currently Amended) The apparatus of claim 1 0, wherein: 

the circuitry is also capable of determining, based at l e ast in p art upon one or more 
credentials, whether to permit execution of one or more operations involving the storage, 

14. (Currently Amended) An apparatus compru;ing: 

circuitry to receive a read request, retrieve one or more respective portions of the 
encrypted data from a Plurality of storage devices comprise d in the storage and decrypting. 
based upon at least o ne key, one or more respective portions of the encrypted read data 
retrieved from storage to generate one or more respective portions of eMtmrt read data 
decrypt, bas e d l e ast in part upon at l o aat ono - k e y, on e or more r e sp e ctiv e porti efts^of 
mputwrijg data from s torage to gen e rato on o or more resp e ctiv e portions - of output e yrerypted 
wrij^ateHhe-e^ ^ capabl e of at least - on e of: g e nerating check data * to b e stored in 
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the storag e , th e ch e ck data b e ing generated bas e d at l e ast in part upon th o on e or moro 
r e sp e ctiv e portions of th e inputwrit e data; and rotri s ving th e on e or mor o r e spective portions 
of th e inpu twrit e data from a plurality of o torago devic e s oornprineri in th a r.tnmg a 

15. (Currently Amended) The apparatus of claim 14, wherein the circuitry is also 
capable of: 

receiving a ro ffitesHo-fefrje v e r e quest e d data from tho storage, the request e d data 
comprising the output data; and prior to the decryp ting of the one or more respective portions 
of the mpvk encrypted data, determining, based atlaoa t in part upon one or more credentials, 
whether the request is authorized. 

16. (Currently Amended) The apparatus of claim 15, wherein: 

the circuitry is also capable of generating^-et l e ast in p arty the at least one key based at 
te a s t - in - part upon at least one of one or more tokens and one or more passwords. 

17. (Currently Amended) The apparatus of claim 14, wherein: 

the storage also stores metadata; and the circuitry is also capable of encrypting the 
metadata based at least in part upon the at least one key. 

1 8. (Original) The apparatus of claim 1 7, wherein: 
the metadata comprises partition information. 
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19. (Currently Amended) An article comprising a storage medium having stored therein 
instructions that when executed by a machine result in the following: 

encrypting, based l e ast in part upon at least one key, one or more respective portions 
ofinpu twrite data to generate one or more respective portions of output encrypted write data 
to be stored in one or more locations in storage; at least ono of: 

generating, based at least in port upon the one or more respective portions of the 
Ottteutencrypted write data, check data to be stored in the storage; and 

selecting the one or more locations so as to jpermit the one or more respective portions 
of the eute« tencrvpted write data to be distributed among two or more storage devices 
comprised in the storage. 

20. (Currently Amended) The article of claim 19 > wherein: 

the storage comprises a redundant array of independent disks (RAID); and 

the check data comprises one of parity data ;ind a copy of the e**te** tencrvpted write 

data. 

21 . (Currently Amended) The article of claim 19, wherein the instructions when executed 
by the machine also result in: 

storing the at least one key in memory; and 

in response , at l e ast in pa rt, to an attempt to tamper with the at least one key, erasing 
the at least one key from the memory. 
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22. (Currently Amended) The article of claim 19, wherein the instructions when executed 
by the machine also result in; 

determining, based a t- least in part upon one or more credentials, whether to permit 
execution of one or more operations involving the storage. 

23. (Currently Amended) An article comprising a storage medium having stored therein 
instructions that when executed by a machine result in the following: 

receiving a read request: 

retrieving one or more respective portions of the encrypted data from a plurality of 
storage devices comprised in the storage: and 

decrypting, based l e ast - in part upon at least one key, one or more respective portions 
of input the encrypted yea<j data retrieved from on e or more reopootivc locations - fa storage to 
generate one or more respective portions of effort read dat a; and at least one of : 

generating chock data to b e stor e d in the sto r ag e , th e ch e ck data boing gen e rat e d 
bas e d at least in part upon the on e or moro respective portions of the inputdata t-and 

r e tri e ving th e on e or mor e r es pective - portions of th e input data from a plurality of 
storag e d e viccs - compriG o d in th e storag e, 

24. (Currently Amended) The article of claim 23, wherein the instructions when executed 
by the machine also result in: 

r e c e iving a request to retrieve requested data from the storag e , the requ e st e d data 
comprising the output d atepand prior to the decrypting of the one or more respective portions 
of the encrypted data, determining, based at^tst-ia-paft upon one or more credentials, 
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whether the request is authorized. 

25. (Currently Amended) The article of claim 24, wherein the instructions when executed 
by the machine also result in: 

generatin g, at l e ast in part, * the at least one key based at l e ast in part upon at least one 
of one or more tokens and one or more passwords. 

26. (Currently Amended) The article of claim 23, wherein: 
the storage also stores metadata; and 

the instructions when executed by the machine also result in encrypting the metadata 
based at l e ast in part upon the at least one key, 

27. (Original) The article of claim 26, wherein: 
the metadata comprises partition information. 

28. (Currently Amended) A system comprising: 

a circuit board comprising a circuit card slot and a circuit card that is capable of being 
inserted into the circuit card slot, the circuit card comprising circuitry, the circuitry being 
capable of encrypting, based least in pa rt upon at legist one key, one or more respective 
portions of tnpt rtwrite data to generate one or more respective portions of o**tm rtencrypted 
write data to be stored in one or more locations in storage; 

the circuitry also being capable of at l e ast on 9 of : 
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generating, based at l e ast in port upon the one or more respective portions of 
the euteu tencrvnted write data, check data to be stored in the storage; and 

selecting the one or more locations so as to permit the one or more respective 
portions of the oufeu tencrypted write data to be distributed among two or more 
storage devices comprised in the storage. 

29. (Currently Amended) The system of claim 28, wherein: the circuitry comprises an 
input/output (I/O) processor, and 

non-volatile memory that is capable of storing the at least one key; and 
the circuitry is capable of detecting-an attempt to tamper with the at least one key, 
and in response , at l e ast in part, to the attempt, erasing the at least one key from the memory. 

30. (Original) The system of claim 29, wherein : 

the circuit board also comprises a host processor coupled to the circuit card slot via a 
bus, and one or more token memories to store one or more tokens; and 

additional circuitry to read one or more additional tokens stored in a removable token 
memory after the removable token memory is inserted into a token reader. 

3 1 . (Currently Amended) A system comprising: 

a circuit board comprising a circuit card slot and a circuit card capable of being 
inserted into the circuit card slot, the circuit card comprising circuitry to receive a read 
request, retrieve one or more respective portions of the encrypted data from a plurality of 
storage devices comprised in the storage and decrypting, based upon at least one key, one or 
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more respective portions of the encrypted read data, retrieved from storage to generate one or 
more respective portio n s of read data d e crypt, based lc asi- in part upon at leant one le n y, n^a 
e r - more - r e sp e otiv e portions of input data from storage to gen e rat e one or more r e spectiv e 
portions of output dat a* 

the circuitry also being capable of at loaat ono of: 

ge ne rating check data to b e stor e d in the s torage, the check data boing generate d 
b ased at least in part upon th e on e or mor e r e sp e ctive portioa s- of th e input da tej-and 

r e tri e ving the ono or more r e sp e ctiv e portions of tho input data from a plurality of 
s torag e d e vic e s compri s ed in th e s torag e-.- 

32. (Original) Hie system of claim 31 t further comprising: 

an input/output (I/O) controller coupled to a redundant array of independent disks 
(RAID); and 

a bus via which the controller is coupled to the circuitry. 

33. (Original) The system of claim 32, wherein: 

the circuit board also comprises a host processor coupled to the slot and the 
controller. 
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